Compliance

Nexthome Labs processes personal data in line with the EU General Data Protection Regulation and the UK GDPR. Our Privacy Policy describes the data we handle as a controller; our Data Processing Addendum governs data we process on your behalf as a processor, including Standard Contractual Clauses for international transfers.

The Services run on infrastructure operated by Nexthome Labs across a small set of rented datacenter regions, plus the following categories of subprocessors:

• Datacenter / VPS hosting providers (compute and storage).
• Payment processor for billing (card data never touches our servers).
• Error and uptime monitoring (operational metadata only).

We update this page before engaging a new material subprocessor. Email [email protected] to subscribe to subprocessor change notifications.

ProperInbox and Nextsend implement SPF, DKIM, and DMARC, and align with bulk-sender requirements from major mailbox providers, including one-click unsubscribe for qualifying traffic and enforced suppression of bounced and complaining recipients. Commercial senders must comply with CAN-SPAM, CASL, and equivalent regulations under our Acceptable Use Policy.

Data subject requests (access, erasure, portability, objection) can be sent to [email protected]; we respond within 30 days. Law-enforcement requests must be served through valid legal process; we notify affected customers unless legally prohibited.

Nexthome Labs is a growing company. Formal certifications (such as SOC 2 Type II and ISO 27001) are on our roadmap; this page will be updated as attestations are achieved. In the meantime, our Security page documents the concrete controls in production today, and we are happy to answer security questionnaires for business customers.